goexpressdelivery[.]cc

This domain presents an elevated risk level and is categorized specifically as a delivery_scam. Infrastructure analysis reveals active use of WordPress, MySQL, PHP, Bootstrap, LiteSpeed, Backbone.js, Underscore.js and Smartsupp components combined with a Let's Encrypt SSL certificate. The site status is offline following detection but previously resolved to IP 198.251.89.30.

Technical indicators include a Gridinsoft trust score of 0 out of 100, VirusTotal results of 6 out of 95 security vendors, registration through NameSilo LLC and creation date of February 21 2026. The domain appears on exactly 2 security blocklists and is blocked by PhishDestroy together with OISD. These metrics align with known patterns of delivery_scam infrastructure that impersonates courier services to solicit payment or credential data.

Users should discard any unsolicited messages referencing goexpressdelivery.cc and instead verify shipment status exclusively through official carrier websites or mobile applications. Enable browser protections that cross-check against public blocklists and report suspected delivery_scam domains to relevant registrars and threat intelligence feeds. Organizations can implement DNS-level filtering for the identified IP 198.251.89.30 and monitor for similar registrations under NameSilo LLC that reuse the same technology stack.